Usuário com melhor resposta

Bad Certificate Error, SCCM SP2, R3 Hotfix KB2483225 installed

Pergunta

I am getting a Bad Certificate error with SCCM while syncing AI. I am on SP2, R3 and I have installed the hotfix 2483225. I have removed AI, read logs and waited for uninstall to complete, installed AI which was successful. I am still getting
this error. I am seeing an ALM folder in my cert store but it is empty.

Here is a sip fromAIUpdateSvc.log. It shows the bootstrap cert error and "already has reached limit for maximum number of credentials". I am not sure if this is why I am still getting the cert error.

Respostas

Hello Ambrozy,
Thank you for posting the details of this issue. We have identified a problem with the most recent certificate on Server 2003 systems (only; 2008 is fine) and will update this thread and others in the community as soon as we have the fix ready.

Todas as Respostas

System Center Configuration Manager 2007 SP2 file information notes

File name

File version

File size

Date

Time

Platform

Aiupdatesvc.exe

4.0.6487.2164

92,008

01-Feb-2010

14:15

x86

Aius.msi

Not Applicable

1,447,424

01-Feb-2010

14:15

Not applicabl

This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question.
Click on "vote as Helpful" if you feel this post helpful to you. This can be beneficial to other community members reading the thread.

This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question.
Click on "vote as Helpful" if you feel this post helpful to you. This can be beneficial to other community members reading the thread.

This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question.
Click on "vote as Helpful" if you feel this post helpful to you. This can be beneficial to other community members reading the thread.

Something else other than the size being different. When I check the cert on Aiupdatesvc.exe, the cert expires in 2010. Runnning patch the cert expires on 3/2011. Is it possible that Microsoft needs to update the download link to the
hotfix to a newer one?

I know this is a really old post, but I have been searching for two days on thew error and this thread comes up first when looking.

It turns out the certificate has expired AGAIN in Sept 2012 and so another new hotfix is required now if you install a new Asset Intellegence sync point. I happened to be moving mine onto new hardware and so ran into this issue.

Anyway, for future seekers, the hotfix you are looking for is 2733615 not 2483225. Now, if someone at Microsoft could be coaxed into updating the 2483225 KB article to let everyone know that one has been superceeded, that would be great. I left
feedback on 2483225.

Becasue I have SCCM installed on Windows 2003 SP2, it seems, that the issue here is with the AI that fails to load a certificate. Gaining an exception on
Windows Server 2003 and the exception is "System.Security.Cryptography.CryptographicException: The specified network password is not correct."

I found information that on Windows XP or Windows Server 2003, any characters greater or equal to 32 characters are ignored. Windows Server 2008 and later has no password limit so the code succeeds on that OS. On Windows
Server 2003 the code fails to load the PFX because the password is more than 31 characters in length.

Hello Ambrozy,
Thank you for posting the details of this issue. We have identified a problem with the most recent certificate on Server 2003 systems (only; 2008 is fine) and will update this thread and others in the community as soon as we have the fix ready.

I am enabling Asset Intelligence as well. applied hotfix KB2483225 and getting the same CryptoException trying to get certificate - The specified network password is not correct in AIUpdateSvc.log as well.